This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/JpSPlDAfnmaVaihRumPcTPfmvXc.roa File: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (raw, json) Hash identifier: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4= Subject key identifier: 26:94:8F:94:30:1F:9E:66:95:6A:28:51:BA:63:DC:4C:F7:E6:BD:77 Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba Certificate serial: 019B7AC86E0FFA8E3265D81A20FE3DB66451 Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/JpSPlDAfnmaVaihRumPcTPfmvXc.roa Signing time: Thu 01 Jan 2026 18:18:34 +0000 ROA not before: Thu 01 Jan 2026 18:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29486 IP address blocks: 31.24.128.0/21 maxlen: 21 81.27.32.0/20 maxlen: 20 178.21.128.0/21 maxlen: 21 2a00:1c90::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:6e:0f:fa:8e:32:65:d8:1a:20:fe:3d:b6:64:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba Validity Not Before: Jan 1 18:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26948f94301f9e66956a2851ba63dc4cf7e6bd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5a:ff:a1:96:64:36:4d:50:44:73:59:ba:66: a5:3d:f0:62:a1:f4:c0:da:52:39:d0:f5:10:cd:b4: ad:64:1b:52:4a:1c:e4:0e:b8:8f:e4:70:8b:05:64: 89:79:1d:fb:a6:0e:40:e8:c5:ac:ed:db:c5:9f:1a: fe:8b:c1:f1:9d:75:52:f7:44:c5:b2:21:91:e5:80: 81:53:e3:b5:f3:c9:61:ac:aa:c7:35:50:50:28:fd: 93:33:00:46:3d:b2:40:76:ff:2d:07:66:31:ab:35: 7c:79:8d:ec:c0:bd:82:03:2c:67:ef:c9:ed:95:2a: 5e:d0:43:af:54:0c:ab:19:42:1e:ff:73:22:43:da: 99:44:99:a3:9e:6e:7f:52:3d:83:69:d7:4f:0c:36: 51:6a:34:fe:0a:e7:72:8e:59:2e:82:68:5f:f7:e9: f6:29:31:93:90:27:69:7a:37:07:ea:43:ee:a4:db: 35:13:82:96:0f:25:29:0b:23:8c:e0:a1:87:06:75: 29:ac:37:f2:08:f8:89:55:a0:d7:24:fb:68:72:75: 14:f9:87:15:b5:16:28:10:83:e6:64:f1:78:b3:74: 47:c8:b2:d2:41:a1:3b:8d:57:f3:78:2a:d6:4c:d4: 83:f5:74:cc:6f:a1:6c:85:4b:18:19:fb:59:aa:c7: bb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:94:8F:94:30:1F:9E:66:95:6A:28:51:BA:63:DC:4C:F7:E6:BD:77 X509v3 Authority Key Identifier: keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/JpSPlDAfnmaVaihRumPcTPfmvXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.128.0/21 81.27.32.0/20 178.21.128.0/21 IPv6: 2a00:1c90::/32 Signature Algorithm: sha256WithRSAEncryption 37:29:c0:eb:55:57:6d:c8:fb:d7:0c:fb:02:9b:4e:f9:7b:39: 3f:25:de:6a:32:aa:52:01:54:c0:94:2c:3f:96:7d:41:48:44: f5:32:51:27:cc:06:64:8c:18:81:47:5a:66:c1:bd:54:ae:c5: 99:db:9b:b0:dd:e2:63:8d:a3:78:fe:22:5a:70:21:b4:8f:89: 58:bd:e8:50:cd:c1:d1:cf:33:03:4b:89:96:8c:4d:ed:b0:8b: 96:bb:60:0a:d9:68:fd:67:dd:75:dd:b0:d0:0e:f5:67:6b:9e: 84:12:6f:54:a8:70:ce:3e:5d:38:a0:f9:66:8c:36:b0:43:c3: c0:7d:3f:94:32:ca:83:dd:08:44:2b:d8:78:cb:be:87:e6:5b: c9:59:7a:2b:23:78:05:42:4a:64:89:ca:d1:8d:2d:26:e7:8e: 09:b6:a5:b4:f7:ab:a2:66:27:f2:9c:37:df:41:26:47:99:dd: 39:71:9a:00:be:84:4f:20:ba:c5:95:55:8f:a7:fe:df:27:ec: 1c:67:c0:1e:ab:f9:5d:cc:43:6e:96:22:a9:ec:1d:c1:d2:60: c0:39:bf:7d:aa:03:15:dc:81:1e:ae:01:9b:fa:75:91:90:36: 89:1f:64:24:c4:83:f6:ff:e9:48:a2:f1:b0:b9:da:ca:7f:9b: 57:78:30:33 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yG4P+o4yZdgaIP49tmRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjRkYjFkY2YwYzI0MjllMTIxNTE2YWUyNzkyZmMzMjUz ZmQzYmEwHhcNMjYwMTAxMTgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjk0OGY5NDMwMWY5ZTY2OTU2YTI4NTFiYTYzZGM0Y2Y3ZTZiZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFr/oZZkNk1QRHNZumalPfBiofTA 2lI50PUQzbStZBtSShzkDriP5HCLBWSJeR37pg5A6MWs7dvFnxr+i8HxnXVS90TF siGR5YCBU+O188lhrKrHNVBQKP2TMwBGPbJAdv8tB2YxqzV8eY3swL2CAyxn78nt lSpe0EOvVAyrGUIe/3MiQ9qZRJmjnm5/Uj2DaddPDDZRajT+Cudyjlkugmhf9+n2 KTGTkCdpejcH6kPupNs1E4KWDyUpCyOM4KGHBnUprDfyCPiJVaDXJPtocnUU+YcV tRYoEIPmZPF4s3RHyLLSQaE7jVfzeCrWTNSD9XTMb6FshUsYGftZqse7yQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCaUj5QwH55mlWooUbpj3Ez35r13MB8GA1UdIwQY MBaAFAMk2x3PDCQp4SFRauJ5L8MlP9O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUt NGQyYzRkYTcyMWQ0LzEvSnBTUGxEQWZubWFWYWloUnVtUGNUUGZtdlhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUtNGQyYzRkYTcyMWQ0 LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDHxiAAwQE URsgAwQDshWAMA0EAgACMAcDBQAqAByQMA0GCSqGSIb3DQEBCwUAA4IBAQA3KcDr VVdtyPvXDPsCm075ezk/Jd5qMqpSAVTAlCw/ln1BSET1MlEnzAZkjBiBR1pmwb1U rsWZ25uw3eJjjaN4/iJacCG0j4lYvehQzcHRzzMDS4mWjE3tsIuWu2AK2Wj9Z911 3bDQDvVna56EEm9UqHDOPl04oPlmjDawQ8PAfT+UMsqD3QhEK9h4y76H5lvJWXor I3gFQkpkicrRjS0m544JtqW096uiZifynDffQSZHmd05cZoAvoRPILrFlVWPp/7f J+wcZ8Aeq/ldzENuliKp7B3B0mDAOb99qgMV3IEergGb+nWRkDaJH2QkxIP2/+lI ovGwudrKf5tXeDAz -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:50 2026 by rpki-client